Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-105892 EUVD-2026-96406GHSA-jh84-7mpc-g94c

WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.13 - Arbitrary File Deletion vulnerability

Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Path Traversal.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.13.

Affected products

VendorProductAffectedFixed
rtCamp rtMedia for WordPress, BuddyPress and bbPress ≤ 4.7.13 —

References